Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: psJptFAl4ojPQUeJHdqRg1xn/IaI1f3hZPGScqMt+Kk=
Subject key identifier: 1A:4A:C5:B7:1F:61:EB:C7:14:2E:70:24:E1:DF:A4:7E:68:46:62:E0
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019D0DB23AFE38F0D38E1076081E10661AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1887
Signing time: Sat 21 Mar 2026 00:01:17 +0000
Manifest this update: Sat 21 Mar 2026 00:01:17 +0000
Manifest next update: Sun 22 Mar 2026 00:01:17 +0000
Files and hashes: 1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
4: FXEme31L2W7KjDVDqu37hEKFe78.roa (hash: omRy5gYKlVoWEItXCmHX+rxLDaANZ2/4bfpF5i1mDS8=)
5: NbVqiX6wU_Fr5GSOQfJ8YNe7b_w.roa (hash: Nw5vSu+E6BX+vcoqztio2E9NJTou/UDDEAsPJgGV9fk=)
6: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: x8R82E8j8t2S2toE/Df22/Ai0RibeXagW1tQlfdQY1Q=)
7: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
8: eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa (hash: wn03BA6mXWMu6Vji8bsJNtZWRlLC+mrxhHq0SG0AH6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:b2:3a:fe:38:f0:d3:8e:10:76:08:1e:10:66:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Mar 21 00:01:17 2026 GMT
Not After : Mar 22 00:01:17 2026 GMT
Subject: CN=1a4ac5b71f61ebc7142e7024e1dfa47e684662e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:57:d3:c2:22:61:d2:19:dd:02:73:f0:67:
2d:41:15:40:04:2a:9d:35:53:a4:c6:5c:65:95:97:
fd:6c:90:15:fb:2b:0b:1d:f6:40:4a:88:42:90:15:
19:dd:99:63:be:2a:bd:54:7c:97:e4:41:10:3b:35:
13:87:e0:d1:b3:19:38:4b:3a:cc:1a:9c:5f:e5:4d:
2b:e1:28:85:a6:8b:8e:77:0c:8f:cc:70:cf:ae:43:
d7:e1:05:ca:74:71:70:d2:f1:db:b2:46:b0:82:28:
28:54:5e:8a:fc:39:77:e6:3a:4f:44:dd:7e:84:30:
4a:d7:26:74:e2:a6:f4:8f:6e:ff:60:49:6a:ac:0d:
10:b1:58:84:0e:5a:ba:28:d5:63:5b:4f:5c:72:39:
52:b2:2c:0e:4c:18:57:d1:fb:a7:5f:96:83:f5:e1:
de:6a:ec:d4:cf:f9:cc:44:9e:5c:ea:ea:de:f1:c0:
50:e8:42:d5:69:25:fe:a7:67:f4:b9:15:59:01:c6:
af:32:0e:53:53:d7:8b:10:4b:54:23:44:9d:ab:fc:
40:45:cb:08:78:75:50:86:a8:28:af:95:b3:47:07:
1c:09:4a:2f:b9:ef:c3:0a:dd:21:97:5d:15:3d:2b:
24:fa:8a:6e:11:fa:97:92:d0:60:73:c0:ca:e8:d0:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:C5:B7:1F:61:EB:C7:14:2E:70:24:E1:DF:A4:7E:68:46:62:E0
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:72:20:ae:75:92:da:20:d8:d0:0c:b6:6b:ed:9a:7f:2b:e7:
5a:3b:db:96:f0:bf:74:23:85:72:72:26:e1:41:40:77:da:1a:
74:a8:00:32:0a:f9:af:5f:46:66:09:c2:57:fc:4b:50:56:94:
af:a1:1f:44:e5:62:e0:09:02:64:f2:43:c8:83:25:47:62:c5:
e9:03:c1:86:de:81:bb:04:fc:ee:bd:6b:12:d8:02:8a:45:61:
94:81:00:00:21:07:4c:ea:74:b2:36:d5:5c:f2:51:e1:e1:23:
39:fa:1c:b3:b1:c0:a3:c8:57:51:3c:b4:93:7e:1c:a1:81:a5:
48:14:20:c1:c6:df:22:ee:56:25:88:24:86:90:17:23:da:29:
67:3d:b1:c5:44:13:df:5e:80:90:60:a7:a0:9f:bf:81:63:42:
9d:01:e5:75:9c:76:1b:56:25:2a:c1:b7:27:80:4a:a6:71:b2:
34:77:7c:9b:b5:04:69:79:32:72:f9:26:da:99:11:71:2a:68:
eb:a7:9f:df:04:ac:2f:80:03:31:3f:a2:32:c9:af:45:e1:09:
8a:ea:b6:c7:42:9b:16:2f:75:7e:de:c7:23:e2:80:41:b2:2b:
f3:d4:4e:1b:a2:ca:aa:da:72:8c:b0:50:ef:29:0d:de:22:31:
6a:d1:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:14:59 2026 by rpki-client